Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The 'Game of Emperor' report reveals a long-term cyber intrusion campaign attributed to the threat actor 'Earth Estries,' targeting multiple sectors including consulting, managed service providers, NGOs, and telecoms across various countries primarily outside Europe. The campaign appears to be persistent and ongoing, with a low severity rating and no known exploits or patches available. The threat actor's activity has been observed in countries such as Afghanistan, Brazil, India, Indonesia, Malaysia, Pakistan, Philippines, South Africa, Taiwan, Thailand, USA, and Vietnam. Although no direct European targets are listed, the sectors affected and the global nature of managed service providers and telecoms imply potential indirect risks to European organizations. The lack of detailed technical indicators and the unknown nature of the threat limit precise mitigation steps, but vigilance and enhanced monitoring of supply chains and third-party providers are recommended. Given the low severity and absence of known exploits, the threat is assessed as medium severity due to its persistence and potential for indirect impact.

The 'Game of Emperor' campaign, attributed to the threat actor 'Earth Estries,' represents a long-term cyber intrusion effort identified through OSINT sources. The campaign targets sectors including consulting, managed service providers, NGOs, and telecoms, which are critical for information flow and infrastructure support. The affected countries span multiple continents, with a focus on Asia, Africa, and the Americas, but no direct European countries are listed among the affected. The campaign's persistence suggests a strategic intent to maintain access or influence over targeted networks. The CVE-2023-46805 is referenced but lacks detailed vulnerability or exploit information, and no patches or known exploits exist, indicating either a newly discovered or poorly understood threat vector. The low severity rating assigned may reflect limited immediate impact or exploitation capability. The absence of technical indicators and detailed attack vectors restricts comprehensive technical analysis, but the involvement of managed service providers and telecoms raises concerns about supply chain risks and potential lateral movement into connected networks. The campaign's OSINT classification and 50% certainty indicate moderate confidence in the attribution and impact assessment. Overall, this threat highlights the importance of monitoring persistent, low-profile intrusion campaigns that may serve as precursors to more significant attacks.

Detailed information about OSINT - Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions. Get real-time updates, technical details, and mitigation

OSINT - Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions - Live Threat Intelligence - Threat Radar | OffSeq.com

OSINT - Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions

Threats Tagged 'misp-galaxy:country="brazil"'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'misp-galaxy:country="brazil"'

Lead Pen Test Professional